ScanMalware.com

Security Scan Report: torndao.com

Redirected to:
https://torndao.com/en/home
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/26912a1c-6189-4275-8558-880d983ec035Domain and IP registration (RDAP)/api/v1/rdap/26912a1c-6189-4275-8558-880d983ec035How often this domain was scanned/api/v1/domain/stats/torndao.comScan history for this domain/api/v1/domain/history/torndao.com?limit=15
This website contacted 3 IPs in 2 countries across 3 domains to perform 24 HTTP transactions. The main domain is torndao.com and was registered 1 year 7 months ago.

Submitted URL: https://torndao.com/

Effective URL:
https://torndao.com/en/home
Redirected

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Impersonates Tornado Cash governance on an unofficial domain, warns that the real tornado.cash is a scam, and solicits donations; avoid.

Risk Factors (4)
Brand impersonation of Tornado Cash on a mismatched domain
Misleading warning about the official tornado.cash domain
Donation solicitation via cryptocurrency address
Unranked domain reputation
Domain age information unavailable

Details

Page Title

Tornado Cash Proposals - Governance for Ethereum Privacy

Scan Type

public

Domain Name Analysis

Domain 'torndao.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'torndao' covers 7 characters holding three vowels versus four consonants. Splitting it apart reveals two words: torn, dao. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

& The tornado.cash domain is held by scammers. Multiple t O tornado Home Pool Proposal Bounty Staking v Relayer¥ LaunchApp Language v ers have already lost huge amounts of money on this website! Pr...

Page Load Overview

2.75s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:52%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,499 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain66% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
66%
technology software
37%
phishing scam
31%
corporate
25%
cryptocurrency
22%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
891.148.141.218Sofia, Sofia-Capital, Bulgaria
AS203380DA International Group Ltd.
8142.251.110.95Google · CDNUnited States
AS15169Google LLC
8142.251.14.94Google · CDNUnited States
AS15169Google LLC
243--

Detected Technologies7

Open-Graph-Protocolvwebsite
100%
JQueryv3.7.1
100%
Node.js
50%
Bootstrap
50%
Nginxv1.20.1
40%
Express
40%
Vue.js
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159623231ACC4243F012775C9B638BB5BA6CB925FC6230D0036FCA7D64FE5E15AD26925

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:sT0Vs7MeTeVeseLZCnaA0MT5hwd5zMFoOqVv7UiYVjKM48hf5:A/76aA0MdCd5zOUy5VjKMx5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15036:MyOkgoTCIAMYBjBJYhoSFQAmNAXF04jM0CRpjEijEyAMDEYiBLEVHBkKoMYBA2ZPNENAaFwlDGZITIQJhVEGMAxggpQ0BCKA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data